General
- Target 2026-07-03_e179b436432811b0ef1eebbb19cd7915_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_stop_tofsee_vidar_wannacry
- Size 9.7MB
- Sample260703-pa79msgv7z
- SHA256 d06a3818d91512d74eb0a1b3c89bfc664920286b3f7775bab9fca4de50801665
- MD5 e179b436432811b0ef1eebbb19cd7915
- SHA1 309bbf55b9aea0337b5c4b5b0d37e81cdd10183c
- SHA512 672d0d7cdf43016234c9dad6b7d0e925b6e2843a70a9449952f77f6a3d832bd18edef2a2a63eb36cea0d87b0df85a684ae414da62a3c03ad957d0e040e6ea0e9
- SSDEEP 98304:kIOERqd/6hkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0E4jovLapID6J6e:SEYd/6ZJEul4szEonqtaovcID6J6e
- TLSH T1B3A68C31B9A1C175D1628070CED5AFA5C2A97C354BF146CB7284BBE91F322C27E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_e179b436432811b0ef1eebbb19cd7915_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_e179b436432811b0ef1eebbb19cd7915_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_e179b436432811b0ef1eebbb19cd7915_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_stop_tofsee_vidar_wannacry
- Size 9.7MB
- SHA256 d06a3818d91512d74eb0a1b3c89bfc664920286b3f7775bab9fca4de50801665
- MD5 e179b436432811b0ef1eebbb19cd7915
- SHA1 309bbf55b9aea0337b5c4b5b0d37e81cdd10183c
- SHA512 672d0d7cdf43016234c9dad6b7d0e925b6e2843a70a9449952f77f6a3d832bd18edef2a2a63eb36cea0d87b0df85a684ae414da62a3c03ad957d0e040e6ea0e9
- SSDEEP 98304:kIOERqd/6hkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0E4jovLapID6J6e:SEYd/6ZJEul4szEonqtaovcID6J6e
- TLSH T1B3A68C31B9A1C175D1628070CED5AFA5C2A97C354BF146CB7284BBE91F322C27E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory